...which requires active malice on part of Microsoft.

Whereas automatic upload of core-dumps even under normal non-attack operating conditions might even be forbidden by law when, for example, working with sensitive personal or otherwise classified data.